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DETAILED ACTION 
Continued Examination Under 37 CFR 1.114 

1 . A request for continued examination under 37 CFR 1.114, including the fee set 
forth in 37 CFR 1 .17(e), was filed in this application after final rejection. Since this 
application is eHgible for continued examination under 37 CFR 1.114, and the fee set 
forth in 37 CFR 1.17(e) has been timely paid, the finality of the previous Office action 
has been withdrawn pursuant to 37 CFR 1.114. Apphcant's submission filed on 14-July - 
2004 has been entered. 

2. The amendment filed on 14-July-2004 has been received and entered. Claims 1- 
13, and 15-24 are pending 

Claim Rejections - 35 USC §103 

3. The following is a quotation of 35 U.S.C 103(a) which forms the basis for all 
obviousness rejections set forth in this Office action: 

(a) A patent may not be obtained though the invention is not identically disclosed or described as set 
forth in section 102 of this title, if the differences between the subject matter sought to be patented and 
the prior art are such that the subject matter as a whole would have been obvious at the time the 
invention was made to a person having ordinary skill in the art to which said subject matter pertains. 
Patentability shall not be negatived by the manner in which the invention was made. 

4. Claims 13, 15, 17-19, 21-24 are rejected under 35 U.S. C. 103(a) as being 
unpatentable over Walker et al (U.S. Pub. No. 2003/002881 1 Al) in view of Schumann 
et al. (U.S. Pub. No. 2002/0021805 Al), and further in view of Thomopoulous et al. (U.S. 



Patent No. 5,978,495). 
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As to claim 13, Walker et al. discloses a method of operating a computer system 
(See Walker et al. page 3, paragraph 0019), comprising: 

using said user fingerprint data to access a database of stored fingerprint data and 
to compare said user fingerprint data with stored fingerprint data (See Walker et al. page 
2, paragraph 0017); 

assigning an access authorization datum to said user based on the results of 
said comparing step (See Walker et al. page 3, paragraph 0021, wherein "access 
authorization datum" reads on "fingerprint authentication code"); 

controlling how the user can interact with said computer system based on said 
assigned authorization datum (See Walker et al. page 2, paragraph 0017, wherein 
"controlling how the user can interact" reads on "extent of a user's authorization is 
determined by the user' s profile"). 

Walker et al. does not teach securely communicating between a fingerprint 
matching module interfaced to an authorization module that is interfaced to a resource 
access module for performing said step of using said fingeiprint. 

Schumann et al. teaches securely communicating between a fingerprint matching 
module interfaced to an authorization module that is interfaced to a resource access 
module for performing said step of using said fingerprint (See Schumann et al. page 5, 
paragraphs 0050-0054). 

Therefore, it would have been obvious to a person having ordinary skill in the art 
at the time of the invention was made to have modified Walker et al . to include securely 
communicating between a fingerprint matching module interfaced to an authorization 
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module that is interfaced to a resource access module for performing said step of using 
said fingerprint. 

It would have been obvious to one of ordinary skill in the art at the time the 
invention was made to have modified Walker et al by the teaching of Schumann et al. to 
include securely communicating between a fingeiprint matching module interfaced to an 
authorization module that is interfaced to a resource access module for performing said 
step of using said fingerprint because having separate interfaces insure more efficient 
security and authentication mechanism. 

Walker et al. as modified still does not teach scanning the fingerprint of a human 
user to generate user fingerprint data. 

Thomopoulous et al. teaches scanning the fingerprint of a human user to generate 
user fingerprint data (See Thomopoulous et al. column 11, lines 9-23). 

Therefore, it would have been obvious to a person having ordinary skill in the art 
at the time of the invention was made to have further modified Walker et al . as modified 
to include scanning the fingerprint of a human user to generate user fingerprint data. 

It would have been obvious to one of ordinary skill in the art at the time the 
invention was made to have further modified Walker et al . as modified by the teaching of 
Thomopoulous et al. to include scanning the fingerprint of a human user to generate user 
fingerprint data because it provides for security. 

As to claim 15, Walker et al. as modified discloses wherein said scanning step is 
performed using a reading device that is integral with a pointing device of said computer 
system (See Walker et al. page 2, paragraph 0017, also see Walker et al. pages 3-4, 
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paragraphs 0020-0023, wherein "reading device that is integral with a pointing device" 
reads on "touch screen/pad"). 

As to claim 17, Walker et al. as modified discloses wherein said scanning step is 
performed in response to a predetermined action taken by the user in interacting with said 
computer system (See Walker et al. page 3, paragraph 0019). 

As to claim 18, Walker et al. as modified discloses wherein said predetermined 
action is a pointing device action taken by the user through operation of a reading device 
that is integral with a pointing device of said computer (See Walker et al. page 2, 
paragraph 0017, also see pages Walker et al. 3-4, paragraphs 0020-0023, wherein 
"reading device that is integral with a pointing device" reads on "touch screen/pad"). 

As to claim 19, Walker et al. as modified discloses wherein said controlling step 
includes controlling network access in a computer system (See Walker et al. pages 2-3, 
paragraphs 0018-0019). 

As to claim 21, Walker et al. as modified discloses wherein said controlling step 
includes controlling record access in a computer system (See Walker et al page 3, 
paragraph 0021). 
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As to claim 22, Walker et al. as modified discloses wherein said controlling step 
includes controlling resource access in a computer system (See Walker et al. page 2, 
paragraphs 0017-0018). 

As to claim 23, Walker et al. as modified discloses wherein said controlling step 
includes controlling feature access in a computer system (See Walker et al page 4, 
paragraphs 0023-0032). 

As to claim 24, Walker et al. as modified discloses wherein each one of said first 
secure interface, said second secure interface and said third secure interface comprising: 

a encryption sub-module encrypting outgoing information fi'om a given secure 
interface (See Schumann et al. page 4, paragraphs 0045-0049, also see Schumann et al. 
page 5, paragraphs 0056-0058); 

a decryption sub-module decrypting incoming information received by said given 
secure interface (See Schumann et al. page 4, paragraphs 0045-0049, also see Schumann 
et al. page 5, paragraphs 0056-0058). 

Claim Rejections - 35 USC §103 
5. The following is a quotation of 35 U.S.C. 103(a) which forms the basis for all 
obviousness rejections set forth in this Office action: 

(a) A patent may not be obtained though the invention is not identically disclosed or described as set 
forth in section 102 of this title, if the differences between the subject matter sought to be patented and 
the prior art are such that the subject matter as a whole would have been obvious at the time the 
invention was made to a person having ordinary skill in the art to which said subject matter pertains. 
Patentability shall not be negatived by the manner in which the invention was made. 
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6. Claims 1-12, 16, and 20 are rejected under 35 U.S.C. 103(a) as being unpatentable 
over Walker et al. (U.S. Pub. No. 2003/002881 1 Al) in view of Felsher (U.S. Pub. No. 
2002/0010679 Al), and further in view of Schumann et al. (U.S. Pub. No. 2002/0021805 
Al), and further in view of Thomopoulous et al. (U.S. Patent No. 5,978,495). 

As to claim 1 , Walker et al. discloses a secure computer resource access system 
(See page 3, paragraph 0019), comprising: 

a store of fingerprint data corresponding to a plurality of different users (See 
Walker et al . page 2, paragraph 0017); 

an authorization system coupled to said reading device and configured to access 
said store and to associate an authorization level with a user based on the user's 
fingerprint (See Walker et al . page 2, paragraph 0017); 

said access mechanism being responsive to said authorization system to control 
how a user can interact with said computer resource based on said associated 
authorization level (See Walker et al . page 2, paragraphs 0012-0013, also see Walker et 
al. page 3, paragraph 0019). 

Walker et al. does not teach a fingerprint reading device for reading fingerprints 
of human users. 

Thomopoulous et al. teaches a fingerprint reading device for reading fingerprints 
of human users (See Thomopoulous et al. column 11, lines 9-23). 

Therefore, it would have been obvious to a person having ordinary skill in the art 
at the time of the invention was made to have further modified Walker et al . as modified 
to include a fingerprint reading device for reading fingerprints of human users. 
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It would have been obvious to one of ordinary skill in the art at the time the 
invention was made to have further modified Walker et al . as modified by the teaching of 
Thomopoulous et al. to include a fingerprint reading device for reading fingerprints of 
human users because it provides for security. 

Walker et al . as modified still does not teach an access mechanism that defines a 
plurality of different authorization levels associated with a plurality of file resources. 

Felsher teaches an access mechanism that defines a plurality of different 
authorization levels associated with a plurality of file resources (See Felsher page 36, 
paragraphs 0251-0254). 

Therefore, it would have been obvious to a person having ordinary skill in the art 
at the time of the invention was made to have further modified Walker et al . as modified 
to include an access mechanism that defines a plurality of different authorization levels 
associated with a plurality of file resources. 

It would have been obvious to one of ordinary skill in the art at the time the 
invention was made to have further modified Walker et al . as modified by the teaching of 
Felsher to include an access mechanism that defines a plurality of different authorization 
levels associated with a plurality of file resources because it provides for secure and cost 
effective method of database access and retrieval. 

Walker et al . as modified still does not teach said access mechanism including at 
least one fingerprint matching module having a first secure interface to said fingerprint 
device and at least one authorization module having a second secure interface to said 
fingerprint matching module and a third secure interface to at least one resource access 
module. 
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Schumann et al. teaches said access mechanism including at least one fingerprint 

matching module having a first secure interface to said fingerprint device and at least one 
authorization module having a second secure interface to said fingerprint matching 
module and a third secure interface to at least one resource access module (See 
Schumann et al. page 4, paragraphs 0045-0049, also see Schumann et al. page 5, 
paragraphs 0056-0058). 

Therefore, it would have been obvious to a person having ordinary skill in the art 
at the time of the invention was made to have further modified Walker et al . as modified 
to include said access mechanism including at least one fingerprint matching module 
having a first secure interface to said fingerprint device and at least one authorization 
module having a second secure interface to said fingerprint matching module and a third 
secure interface to at least one resource access module. 

It would have been obvious to one of ordinary skill in the art at the time the 
invention was made to have further modified Walker et al . as modified by the teaching of 
Schumann et al. to include said access mechanism including at least one fingerprint 
matching module having a first secure interface to said fingerprint device and at least one 
authorization module having a second secure interface to said fingerprint matching 
module and a third secure interface to at least one resource access module because having 
separate interfaces insure more efficient security and authentication mechanism. 

As to claim 2, Walker et al. as modified discloses wherein said fingerprint reading 
device is integral with a pointing device of a computer system (See Felsher page 38, 
paragraph 0285). 
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As to claim 3, Walker et al. as modified discloses wherein said fingerprint reading 
device is integral with a keyboard device of a computer system (See Walker et al . page 2, 
paragraph 0017, wherein "fingerprint reading device is integral with a keyboard device" 
reads on "fingerprint sensor/keyboard"). 

As to claim 4, Walker et al. as modified discloses wherein said store of fingerprint 
data employs a data structure for storing said fingerprint data in an encrypted format (See 
Felsher page 35, paragraph 0248, also see Felsher abstract). 

As to claim 5, Walker et al. as modified discloses wherein said encrypted format 
is protected by a software key (See Felsher pages 3-4, paragraphs 0043-0044, also see 
Walker et al. page 1, paragraph 0008). 

As to claim 6, Walker et al. as modified discloses wherein said authorization 
system communicates with said store of fingerprint data across an encrypted channel (See 
Felsher page 13, paragraph 0113, also see Felsher pages 35-36, paragraph 0250, also see 
Felsher page 3, paragraph 0043). 

As to claim 7, Walker et al as modified discloses wherein said authorization 
system communicates with said store of fingerprint data across a computer network (See 
Walker et al . pages 2-3, paragraphs 0018-0019). 
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As to claim 8, Walker et al as modified discloses wherein said access mechanism 
controls file access within a computer system (See Felsher page 18, paragraph 0131). 

As to claim 9, Walker et al. as modified discloses wherein said access mechanism 
controls network access within a computer system (See Walker et al . pages 2-3, 
paragraphs 0018-0019). 

As to claim 10, Walker et al. as modified discloses wherein said access 
mechanism controls record access within a computer system (See Walker et al . page 3, 
paragraph 0021). 

As to claim 11, Walker et al as modified discloses wherein said access 
mechanism controls resource access within a computer system (See Felsher page 19, 
paragraph 0133). 

As to claim 12, Walker et al. as modified discloses wherein said access 
mechanism controls feature access within a computer system (See Felsher page 10, 
paragraph 0091, also see Felsher page 19, paragraph 0137). 



As to claim 16, Walker et al. as modified does not teach wherein said scanning 
step is performed periodically as the user interacts with said computer system. 
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Felsher teaches wherein said scanning step is performed periodically as the user 
interacts with said computer system (See Felsher page 33, paragraph 0227, also Felsher 
pages 37-38, paragraph 0272-0274). 

Therefore, it would have been obvious to a person having ordinary skill in the art 
at the time of the invention was made to have further modified Walker et al . as modified 
to include wherein said scanning step is performed periodically as the user interacts with 
said computer system. 

It would have been obvious to one of ordinary skill in the art at the time the 
invention was made to have further modified Walker et al . as modified by the teaching of 
Felsher to include wherein said scanning step is performed periodically as the user 
interacts with said computer system because it provides for secure and efficient method 
of database access and retrieval 

As to claim 20, Walker et al as modified does not teach wherein said controlling 
step includes controlling file access in a computer system. 

Felsher teaches wherein said controlling step includes controlling file access in a 
computer system (See Felsher page 18, paragraph 0131), 

Therefore, it would have been obvious to a person having ordinary skill in the art 
at the time of the invention was made to have further modified Walker et al as modified 
to include wherein said controlling step includes controlling file access in a computer 
system. 

It would have been obvious to one of ordinary skill in the art at the time the 
invention was made to have further modified Walker et al as modified by the teaching of 
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Felsher to include wherein said controlling step includes controlling file access in a 
computer system because controlling file access allows for added security and efficiency 
in accessing computer data. 

Response to Arguments 

7. Applicant's arguments with respect to claims 1-13, and 15-24 have been 
considered but are moot in view of the new ground(s) of rejection. 

Conclusion 

8. Any inquiry concerning this communication or earlier communications from the 
examiner should be directed to Neveen Abel-Jalil whose telephone number is 703-305- 
8114. The examiner can normally be reached on 8:30AM-5; 30PM EST. 

If attempts to reach the examiner by telephone are unsuccessful, the examiner's 
supervisor, Dov Popovici can be reached on 703-305-3830. The fax phone number for 
the organization where this application or proceeding is assigned is 703-872-9306. 

Information regarding the status of an application may be obtained fi'om the 
Patent Application Information Retrieval (PAIR) system. Status information for 
published applications may be obtained from either Private PAIR or Public PAIR. Status 
information for unpublished applications is available through Private PAIR only. For 
more information about the PAIR system, see http://pair-direct.uspto.gov. Should you 
have questions on access to the Private PAIR system, contact the Electronic Business 
Center (BBC) at 866-217-9197 (toll-free). 
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July 26, 2004 




SAM RIMELL 
PRIMARY EXAMINER 



